General
- Target 2026-09-01_4abeba1ac4dffab1ff5e0fc2e8074a2c_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- Sample260903-ps33mshc78
- SHA256 6a43ebd71b6648c7efc998b08561b3fcbfd5363c7e9e933fef21f2058bd13b96
- MD5 4abeba1ac4dffab1ff5e0fc2e8074a2c
- SHA1 6531b6922b7c7579f2bce5c2851cc667adc76c64
- SHA512 fa456e43c724df98eef04e095173b26a739e967c43c31c28c48a85e88b067af02ee9130dcd2af6d3094978ed411dba079a6c1a1ed1d6d5ceef8035bc1e90a2ad
- SSDEEP 12288:Fi85jKkWyndPdNC8nS/ts9IGNtAq4AhezSpZZnI:F0kWefnSYNtAq4nzSpZZnI
- TLSH T1DCC49E46A7E500B9E1F7E678C9A74A02E77B7C050670DB8F03E881772F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_4abeba1ac4dffab1ff5e0fc2e8074a2c_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_4abeba1ac4dffab1ff5e0fc2e8074a2c_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_4abeba1ac4dffab1ff5e0fc2e8074a2c_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- SHA256 6a43ebd71b6648c7efc998b08561b3fcbfd5363c7e9e933fef21f2058bd13b96
- MD5 4abeba1ac4dffab1ff5e0fc2e8074a2c
- SHA1 6531b6922b7c7579f2bce5c2851cc667adc76c64
- SHA512 fa456e43c724df98eef04e095173b26a739e967c43c31c28c48a85e88b067af02ee9130dcd2af6d3094978ed411dba079a6c1a1ed1d6d5ceef8035bc1e90a2ad
- SSDEEP 12288:Fi85jKkWyndPdNC8nS/ts9IGNtAq4AhezSpZZnI:F0kWefnSYNtAq4nzSpZZnI
- TLSH T1DCC49E46A7E500B9E1F7E678C9A74A02E77B7C050670DB8F03E881772F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.